e418ae9778937d1075e8937e462bbde4eb9c529ed3b0ee0b3284429955ef8a9d

Sharing

Copy URL Twitter E-mail

General

Target

e418ae9778937d1075e8937e462bbde4eb9c529ed3b0ee0b3284429955ef8a9d
Size

167KB
MD5

0f82fa4e84f2eb211637af023ebe3072
SHA1

77da43fb506d7988c4e5328df8737e0f49a904dd
SHA256

e418ae9778937d1075e8937e462bbde4eb9c529ed3b0ee0b3284429955ef8a9d
SHA512

5935e79d2e1d6bc39573b3aac165b6db336b420b88b2010d89c3f613ad61aeeae3b0720837f9b407fe27fcecb2bb669f7ed5afde2c03a0e4f5ba20a1c37e3604
SSDEEP

3072:XYPztfoNyUZ+XIlszcZs4zeBjR3wXiDwvrTF:opwls4Z2jti

Score

N/A

Malware Config

Signatures

Files

e418ae9778937d1075e8937e462bbde4eb9c529ed3b0ee0b3284429955ef8a9d
.exe windows x86

617bcb5e4a918d14ed872a57e49dad63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
GetParent
GetDesktopWindow
CharNextA
GetDC
TranslateMessage

kernel32

GetCurrentThread
GetWindowsDirectoryA
lstrlenW
GetDriveTypeA
GetTickCount
GetConsoleOutputCP
DeleteFileA
GetModuleHandleW
GetProcessHeap
GetCurrentThreadId
GetUserDefaultLangID
CopyFileA
GetCurrentProcessId
GetVersion
QueryPerformanceCounter
RemoveDirectoryA
GetCommandLineA
lstrcmpiW
GlobalFindAtomA
lstrcmpiA
GetStartupInfoA
GlobalFindAtomW
GetThreadLocale
SetCurrentDirectoryA
MulDiv
IsDebuggerPresent
GetACP
lstrlenA
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
DeleteFileW
lstrcmpA
VirtualAlloc
VirtualFree

gdi32

PatBlt
SetTextAlign
SetMapMode
CreateFontIndirectA
GetPixel
GetClipBox
SetTextColor
CreateCompatibleDC
RectVisible
SaveDC
CreateSolidBrush
SelectPalette
DeleteDC
SetStretchBltMode
RestoreDC
SelectObject
GetObjectA
LineTo
CreatePalette
GetTextMetricsA
GetDeviceCaps
DeleteObject
CreatePen
GetStockObject

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Grijmbdm
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Rfwh Qig
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

617bcb5e4a918d14ed872a57e49dad63

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 11KB - Virtual size: 11KB

Grijmbdm Size: 512B - Virtual size: 4KB

.rdata Size: 26KB - Virtual size: 25KB

Rfwh Qig Size: 512B - Virtual size: 4KB

.data Size: 100KB - Virtual size: 100KB

.rsrc Size: 27KB - Virtual size: 47KB

.text
Size: 11KB - Virtual size: 11KB

Grijmbdm
Size: 512B - Virtual size: 4KB

.rdata
Size: 26KB - Virtual size: 25KB

Rfwh Qig
Size: 512B - Virtual size: 4KB

.data
Size: 100KB - Virtual size: 100KB

.rsrc
Size: 27KB - Virtual size: 47KB